| शीर्षक | chillzhuang SpringBlade 5.0.1 Incorrect Authorization |
|---|
| विवरण | chillzhuang SpringBlade 5.0.1 contains an incorrect authorization vulnerability in the platform-global parameter management functionality. The POST /param/submit endpoint is protected by the HAS_ROLE_ADMIN role check, which accepts both the administrator and admin role aliases. Because every tenant administrator is provisioned with the admin role, a tenant administrator can pass this authorization check even though platform-global configuration should be restricted to the platform administrator. The blade_param table is not tenant-scoped, and the submitted record is updated by primary key without validating the caller's tenant or requiring the platform-administrator role. As a result, an authenticated tenant administrator can modify platform-global configuration records outside the administrator's tenant boundary. The issue was reproduced on SpringBlade v5.0.1 at commit 0c180b9d0d68542ab4a2938e23989db7078832ca, where a tenant administrator successfully changed the global account.initPassword parameter from 123456 to PwnedByTenantB.
The issue has been reported to the upstream maintainers via GitHub Issue; no maintainer response has been received to date. |
|---|
| स्रोत | ⚠️ https://github.com/chillzhuang/SpringBlade/issues/41 |
|---|
| उपयोगकर्ता | cztang (UID 101252) |
|---|
| सबमिशन | 18/09/2026 04:07 AM (18 दिन पहले) |
|---|
| संयम | 05/10/2026 06:22 PM (18 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 413641 [chillzhuang SpringBlade तक 5.0.1 Parameter Submit Management ParamController.java initPassword अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|